Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C8A4BD0E3A311EA849FE735C4F9AE02.roa
File: 2C8A4BD0E3A311EA849FE735C4F9AE02.roa (raw, json)
Hash identifier: 5CO26Ayl/LBBaYZqZgjioo/9R72Gt+CmIH2pkFSynNg=
Subject key identifier: 43:7A:CD:A3:58:0E:7F:85:5B:03:64:04:0F:7B:1C:4A:BB:84:A6:11
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 89E1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C8A4BD0E3A311EA849FE735C4F9AE02.roa
Signing time: Thu 30 May 2024 16:00:41 +0000
ROA not before: Thu 30 May 2024 16:00:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134903
IP address blocks: 103.210.140.0/22 maxlen: 24
2405:afc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35297 (0x89e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:00:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a2a9-4660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:c7:6a:33:71:90:54:f3:06:61:39:8c:35:
6b:88:af:c0:58:3d:6f:c0:e5:9c:56:f6:04:ff:d9:
f8:9a:5b:0f:58:a8:6a:0d:0e:9b:b0:c0:80:9b:f7:
f4:28:75:8c:c2:40:b4:88:af:c7:db:34:4a:71:0d:
e4:8a:6d:ed:0b:02:ee:07:a3:d8:6c:82:55:a3:c9:
d3:f2:5a:e1:1b:76:64:81:bc:0a:18:18:08:2d:29:
57:48:59:d8:7e:1d:7c:1a:2b:d2:23:09:ad:21:d8:
93:39:e8:a8:c3:4e:36:09:89:d0:d6:54:cd:42:32:
56:49:96:75:8e:a2:60:19:d7:7c:2a:d5:f2:d2:cd:
04:1a:24:69:c6:93:f2:52:2c:6d:b3:53:3a:ad:3d:
19:1a:3d:44:c2:61:a9:94:81:47:13:11:34:1c:93:
43:7a:3e:93:2b:97:e5:d2:ef:9a:11:8a:cf:cf:d3:
86:82:c9:a4:40:6c:d4:8d:78:ab:22:c9:e2:46:45:
0f:ab:1a:b3:b6:fe:49:6f:36:fa:19:69:fc:b5:2c:
33:31:0d:23:96:26:fa:2b:23:cc:71:52:63:d2:d9:
5d:60:63:e7:80:80:38:82:ce:dd:2a:47:3a:bc:1a:
b1:a6:5a:39:74:7a:46:df:46:92:cf:29:91:78:81:
b0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7A:CD:A3:58:0E:7F:85:5B:03:64:04:0F:7B:1C:4A:BB:84:A6:11
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C8A4BD0E3A311EA849FE735C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.210.140.0/22
IPv6:
2405:afc0::/32
Signature Algorithm: sha256WithRSAEncryption
43:1a:c9:2c:62:38:f5:4e:bb:c2:85:0e:bc:cf:1e:0b:2c:05:
2a:b0:bc:ee:ea:93:c0:bd:1e:76:20:7b:84:d4:9e:6e:8e:67:
f2:62:dd:9c:18:11:12:b4:d1:9e:90:b1:1e:97:29:2a:94:34:
e8:02:0c:bb:4a:8e:1d:31:44:11:26:cc:9a:84:8a:ce:33:30:
49:ec:2b:12:d2:5e:69:fb:46:44:a8:11:a2:55:ab:57:69:69:
af:93:ac:51:11:e6:63:72:ae:54:d9:df:c5:7f:ae:3d:f0:02:
72:0b:b0:f6:0e:9a:2c:aa:64:3a:e8:13:46:04:0d:38:70:5b:
26:ee:09:74:5e:ae:d9:71:92:0b:b8:51:c6:52:63:d3:3e:60:
4d:17:88:65:8f:85:92:d4:4b:1a:ab:d3:82:8e:02:af:61:9b:
55:0a:2f:f5:13:64:ee:4a:e8:90:84:23:b8:0a:87:b2:9b:9e:
87:09:8b:b8:21:eb:c3:6a:46:84:67:43:8e:8c:f2:52:58:93:
40:e6:6a:97:24:6e:49:fe:70:36:98:b4:2a:3d:15:c6:50:a8:
1f:1f:79:82:ee:88:cd:28:32:85:65:f2:d0:54:8b:e2:be:f6:
a5:a6:e8:a9:9a:e2:59:32:03:e7:6a:9d:3d:a5:2d:48:43:6b:
a5:10:29:62
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAInhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MDA0MVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGEyYTktNDY2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ9Xx2ozcZBU8wZhOYw1a4ivwFg9b8DlnFb2BP/Z+JpbD1ioag0Om7DAgJv3
9Ch1jMJAtIivx9s0SnEN5Ipt7QsC7gej2GyCVaPJ0/Ja4Rt2ZIG8ChgYCC0pV0hZ
2H4dfBor0iMJrSHYkznoqMNONgmJ0NZUzUIyVkmWdY6iYBnXfCrV8tLNBBokacaT
8lIsbbNTOq09GRo9RMJhqZSBRxMRNByTQ3o+kyuX5dLvmhGKz8/ThoLJpEBs1I14
qyLJ4kZFD6sas7b+SW82+hlp/LUsMzENI5Ym+isjzHFSY9LZXWBj54CAOILO3SpH
OrwasaZaOXR6Rt9Gks8pkXiBsFcCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBRDes2j
WA5/hVsDZAQPexxKu4SmETAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJDOEE0QkQw
RTNBMzExRUE4NDlGRTczNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/
BB8wHTAMBAIAATAGAwQCZ9KMMA0EAgACMAcDBQAkBa/AMA0GCSqGSIb3DQEBCwUA
A4IBAQBDGsksYjj1TrvChQ68zx4LLAUqsLzu6pPAvR52IHuE1J5ujmfyYt2cGBES
tNGekLEelykqlDToAgy7So4dMUQRJsyahIrOMzBJ7CsS0l5p+0ZEqBGiVatXaWmv
k6xREeZjcq5U2d/Ff6498AJyC7D2DposqmQ66BNGBA04cFsm7gl0Xq7ZcZILuFHG
UmPTPmBNF4hlj4WS1Esaq9OCjgKvYZtVCi/1E2TuSuiQhCO4Coeym56HCYu4IevD
akaEZ0OOjPJSWJNA5mqXJG5J/nA2mLQqPRXGUKgfH3mC7ojNKDKFZfLQVIvivval
puipmuJZMgPnap09pS1IQ2ulECli
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:45:59 2025 by rpki-client